Patent classifications
H04L47/803
TECHNOLOGIES THAT PROVIDE POLICY ENFORCEMENT FOR RESOURCE ACCESS
Examples described herein relate to one or more processors, when operational, to execute instructions stored in memory device, to cause performance of: execute a driver that is to: negotiate capabilities of hardware with a control plane for a virtualized execution environment and limit capabilities of the hardware available to the virtualized execution environment based on a service level agreement (SLA) associated with the virtualized execution environment. In some examples, the driver is to advertise hardware capabilities requested by the virtualized execution environment. In some examples, the control plane is to set capabilities of a hardware available to the virtualized execution environment based on the SLA.
SUPPORT FOR MULTIPLE VIRTUAL NETWORKS OVER AN UNDERLAY NETWORK TOPOLOGY
Techniques are described for supporting multiple virtual networks over an underlay network. The techniques may provide support for network slicing and enhanced virtual private networks (VPNs) over an underlay network. In general, the techniques include allocating a subset of resources (e.g., nodes and/or links) of the underlay network to a particular virtual network, and advertising the subset of resources to provider edge (PE) routers that are participating in the virtual network. A network controller device may advertise the subset of resources for the virtual network to the respective PE routers using BGP-LS (Border Gateway Protocol-Link State). Based on the advertisements, each of the PE routers generates a restricted view of the full underlay network topology for the virtual network and, thus, only uses the subset of resources in the restricted view to generate routing and forwarding tables for the virtual network.
ON-DEMAND RESOURCE PROVISIONING
Methods, systems, and computer-readable media for on-demand resource provisioning for service instances. An on-demand service broker provisions IaaS resources at service instance creating time. The service broker provides a catalog listing one or more service plans, each service plan corresponds to a set of available resources. A user device selects a respective service plan that matches specific needs of an application that consumes the resources. The service broker generates a deployment manifest based on the selected service plan. The service broker then submits the deployment manifest to a deployment system. The deployment system provisions the resources to the service instance according to the manifest generated by the service broker.
MAPPING VLAN OF CONTAINER NETWORK TO LOGICAL NETWORK IN HYPERVISOR TO SUPPORT FLEXIBLE IPAM AND ROUTING CONTAINER TRAFFIC
Some embodiments of the invention provide a method for adding routable subnets to a logical network that connects multiple machines and is implemented by a software defined network (SDN). The method receives an intent-based API that includes a request to add a routable subnet to the logical network. The method defines (i) a VLAN (virtual local area network) tag associated with the routable subnet, (ii) a first identifier associated with a first logical switch to which at least a first machine in the multiple machines that executes a set of containers belonging to the routable subnet attaches, and (iii) a second identifier associated with a second logical switch designated for the routable subnet. The method generates an API call that maps the VLAN tag and the first identifier to the second identifier. The method provides the API call to a management and control cluster of the SDN to direct the management and control cluster to implement the routable subnet.
Remote hardware acceleration
A host fabric interface (HFI) apparatus, including: an HFI to communicatively couple to a fabric; and a remote hardware acceleration (RHA) engine to: query an orchestrator via the fabric to identify a remote resource having an accelerator; and send a remote accelerator request to the remote resource via the fabric.
Network monitor, network monitoring method, and recording medium storing program
Provided is a network monitor for a mobility network used in a mobility entity. The mobility network is formed of a source unit, a destination unit, and one or more repeaters. Each repeater includes a network monitor that receives, from the source unit, an announcement for a bandwidth reservation. The announcement includes a value of a first bandwidth requirement for the source unit to perform first data communication. The network monitor further determines a determination result of whether to reserve the first bandwidth by comparing the value of the first bandwidth with a range of values of a second bandwidth for the first data communication specified in a white list stored in a database. The network monitor reserves the first bandwidth for performing the first data communication depending on the determination result, and transmits, to the source unit, a reservation status of the first bandwidth.
Service allocation across multi-managed heterogeneous networks
Techniques are described to provide to provide service allocation across multi-managed heterogeneous networks. In one example, a method includes determining, by an application network policy controller, service information for an application, wherein the application communicates with an application server. The method may further include identifying one or more network domains of a plurality of network domains to provide network connectivity between the application and the application server based, at least in part, on service qualifiers and context information for the plurality of network domains and the service information for the application; generating an application policy for the application, wherein the application policy identifies, at least in part, the one or more network domains to provide network connectivity between the application and the application server; and communicating the application policy to the one or more identified network domains to provide network connectivity between the application and the application server.
Computer network of computing resource infrastructures and method for allocating these resources to client applications
Disclosed is a computer network including a group of a plurality of computing resource infrastructures associated with a plurality of orchestrators responsible for allocating the resources of this infrastructure to one or more client applications and grouped into a swarm in which they are interconnected by a cooperation interface, the allocation of resources being decided by a decision method based firstly on evaluations distributed among the orchestrators, then on a consensus protocol between the orchestrators which is based on the evaluations and is carried out at the cooperation interface in order to choose one of the infrastructures of the group to host some or all of the client application.
Predicting wait time for new session initiation during increased data traffic latency
A system includes at least one server that is configured to provide a multi-client network service to a plurality of existing users. When the server receives requests to join the multi-client network service from new users, the server may issue timestamps to each new user, obtain load metric based on the requests or timestamps, and collect the load metric to obtain historical data characterizing a demand in the multi-client network service over time. Further, based on the historical data, the server can predict a future load demand in the multi-client network service and selectively enable to join the multi-client network service by at least one of the plurality of new users based on the future load demand.
METHODS AND APPARATUS FOR APPLICATION AWARE HUB CLUSTERING TECHNIQUES FOR A HYPER SCALE SD-WAN
Some embodiments provide a method for a software-defined wide area network (SD-WAN) connecting first and second sites, with the first site including an edge node and the second site including multiple forwarding hub nodes. At the edge node of the first site, the method receives a packet of a particular flow including a flow attribute. The method uses the flow attribute to identify a hub-selection rule from multiple hub-selection rules, each hub-selection rule identifying at least one forwarding hub node at the second site for receiving one or more flows from the first site, and at least one hub-selection rule identifying at least one forwarding hub node that is not identified by another hub-selection rule. The method uses the identified hub-selection rule to identify a forwarding hub node for the particular flow. The method then sends the packet from the edge node at the first site to the identified forwarding hub node at the second site.